Question

But suddenly today user reported the outlook get disconnected. After checking, found that Exchange Server 1 down with black screen, but we still able to PING the server. After force restart the server, everything working fine.

By check the event viewer, found that Event ID 10030 were logged with description as below.

The event ID 10030 used to cause a store dismount on Exchange 2010 not 2013, at this point we believe it was already covered with
a RU for 2010 and should not effect Exchange 2013 you can find more information about that error in here and cross check it with your Symptoms which are different anyway.

I hope you can get back to us with the information needed so we can help you further.

Microsoft is conducting an online survey to understand your opinion of the Technet Web site. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.